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REQUEST FOR REFUND 

Sir: 

Applicants request a refund in the above-identified application due to an error 
on the part of the Patent Office. 

On March 1 , 2005, Applicants filed an Amendment containing claims in 
excess of twenty (20). A total of fourteen (14) claims had been previously filed, of 
which eight (8) were independent claims. The March 1, 2005 amendment added 
eight (8) claims, all of which were dependent claims. 

However, the Applicants' representatives Monthly Statement of Account for 
March, 2005 (copy enclosed) indicates that on March 1 1 , 2005, Applicants were 
charged $200.00 for two independent claims. A copy of the claims from the 
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amendment filed on March 1, 2005 is enclosed as evidence that the additional 
claims were dependent claims and the charge for additional claims should have 
been $100.00 

Please credit a refund in the amount of $100.00 to the Deposit Account No. 
50-1417. 
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MATTINGLY, STANGER & MALUR, P.C. 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Applicant: Katsuyuki OKEYA 

Serial No.: 09/811,459 
Filed: March 20, 2001 

For METHOD OF CALCULATING MULTIPLICATION BY SCALARS 

ON AN ELLIPTIC CURVE AND APPARATUS USING SAME 
AND RECORDING MEDIUM 

Group: 2134 
Examiner: J. Lipman 

AMENDMENT 

Commissioner for Patents Marcn 1 • 2005 

P.O. Box 1450 
Alexandria. VA 22313-1450 

Sir: 

In response to the Office Action dated October 1 , 2004, the period for reply 
thereto being extended two months by the attached Petition for Extension of Time to 
expire March 1, 2005, reconsideration and withdrawal of the outstanding rejections 
and allowance of the present application are respectfully requested in view of the 
following amendments and remarks. 

Amendments to the Claims begin on page 2. 

Remarks are included following the amendments. 



U.S. Application No. 09/81 1 ,459 

Amendme nt to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 



i istin g of Claims : 

1 . (currently amended) A scalar multiplication calculation method jn^nenipttc 
.■.^rrvotosvstem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve i n an U li pliu c ur , v r rypt n ny rt wn , comprising 
the steps of: 

judgmg- determininq a value of a bit of said scalar value; and 

executing operations on said elliptic curve a predetermined number of times 

and in a predetermined order without depending on said jua^eieimined_value of 

said hi t tn calculate a scalar multiplied point; 

eai H n p»r a tinn S incluf " ri» ,ittan» of addition and doubling, said 

n ppraHnm being * **** far scalar values nf one or zero the scalar value 



determining 



thP selection of saM Edition and Hnnhlino calculations executed . 



2. (currently amended) A scalar multiplication calculation method jnjmejjiptic 
nnrvpcrvptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curv e in an e l lipt i c curve cryptocy Rt em , comprising 
the steps of: 

judgmg- determining a value of a bit of said scalar value; and 
executing calculations of a ddition on said elliptic curve and doubling on said 
elliptic curve in the order that said doubling on said elliptic curve is executed after 
said addition on said elliptic curve is executed tn nln.late a scalar multiplied point; 

2 
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,»h 0 r 0 in caiH addition and rinublina calcula tions are selected for scalar values. 
nf one or zero. thi> scalar value determining the selection of said addition and 
doubling calculations executed . 

3. (currently amended) A scalar multiplication calculation method in an elliptic 
mn/ecrvptosystem for calculating a scalar multiplied point on the basis of a scalar 
„„h o nrint nn an flllintic curv e in a n ulllpt i o curve crypt o Ryfitem , comprising 
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doubling calculations executed . 

5. (currently amended) A scalar multiplication calculation method in an elliptic 
rurve crvptosvstem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve in an el li ptic curvo crypt o ^tem , comprising 

the steps of: 

executing addition on said elliptic curve; 

pdeine- determinino a value of a bit of said scalar value; and 

executing doubling calculations on said elliptic curve to calculate a scalar 

multiplied point; 

wherein said doubling calculations are selecte d for scalar values of one or 
zero, the scalar value determining the selection of said doubling calculations 
executed . 

6. (currently amended) A scalar multiplication calculation method in an elliptic 
curve crvptosvstem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve in an o lliptic curvo cryptosyotom . comprising 
the steps of: 

randomizing calculation order of addition on said elliptic curve and doubling 

on said elliptic curve; 
j judgina- determining a value of a bit of said scalar value; and 

executing said addition on said elliptic curve and said doubling on said elliptic 
curve in said order randomized by said step of randomizing calculation order of 
addition on said elliptic curve and doubling on said elliptic curve to calculate a scalar 
multiplied point: 
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w»hor*in said calculations of addition an d doubling are selected for scalar 
v/aiups of one or z»n thP scalar valf ^mining the selection of said addition and 
doubling calculations executed . 

7. (currently amended) A scalar multiplication calculation method in an elliptic 
n.rvft crvptosvstem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve in un ell iptic curve crypt nn ystpm , comprising 
the steps of: 

judgmg- determininq a value of a bit of said scalar value; 

randomizing calculation order of addition on said elliptic curve and doubling 

on said elliptic curve; and 

executing said addition on said elliptic curve and said doubling on said elliptic 
curve in said order randomized by said step of randomizing calculation order of 
addition on said elliptic curve and doubling on said elliptic curve to calculate a scalar 
multiplied point; 

whPrein said calculations of addition and doubli ng are selected for scalar 
values of one or rero the scalar value determi ning the selection of said addition and 
doubling calculations executed . 

8. (original) A data generation method for generating second data from first 
data, comprising the step of calculating a scalar multiplication by use of a scalar 
multiplication calculation method according to any one of Claims 1 to 7. 

9. (original) A signature generation method for generating signature data from 
data, comprising the step of calculating a scalar multiplication by use of a scalar 
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multiplication calculation method according to any one of Claims 1 to 7. 

10. (original) A decryption method for generating decrypted data from 
encrypted data, comprising the step of calculating a scalar multiplication by use of a 
scalar multiplication calculation method according to any one of Claims 1 to 7. 

1 1 . (currently amended) A scalar multiplication calculator for calculating a 
scalar multiplied point on the basis of a scalar value and a point on an elliptic curve 
in an elliptic curve cryptosystem, comprising: 

bit value judgement judgment means for jydgmq-determininq a value of a bit 

of said scalar value; 

addition operation means for executing addition calculations on said elliptic 

curve; and 

doubling operation means for executing doubling calculations on said elliptic 

curve; 

wherein after the value of said bit of scalar value is judged-determined by said 
bit value judgement judgment means, said addition on said elliptic curve and said 
doubling on said elliptic curve are executed by said addition operation means and 
said doubling operation means a predetermined number of times and in a 
predetermined order so as to calculate a scalar multiplied pointy 

wherein said addition and doubling calculations are sele cted for scalar values 
of one or zero, the scalar value determining the se lection of said addition and 
doublino calculations executed . 

12. (original) A recording medium for storing a program relating to a scalar 
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multiplication calculation method according to any one of Claims 1 to 7. 

13. (original) A scalar multiplication calculation method according to any one 
of Claims 1 to 7, wherein a Montgomery-form elliptic curve is used as said elliptic 
curve. 

14. (original) A scalar multiplication calculation method according to any one 
of Claims 1 to 7, wherein an elliptic curve defined on a finite field of characteristic 2 is 
used as said elliptic curve. 

15. (new) The multiplication calculation method according to claim 1, wherein 
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calculations include doubling the point mP to obtain 2(mP) where m comprises the 
scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 . the addition 
calculation includes adding a point mP to a double point of the point.(m + 1)P and the 
doubling calculations include doubling the double point of the point (m + 1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

17. (new) The multiplication calculation method according to claim 3, wherein 
when the value of the bit of the scalar value is 0, the addition calculation includes 
adding a point mP to a double point of the point (m+1)P and the doubling 
calculations include doubling the point mP to obtain 2(mP) where m comprises the 
scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a double point of the point (m + 1)P and the 
doubling calculations include doubling the double point of the point (m + 1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

18. (new) The multiplication calculation method according to claim 4, wherein 
when the value of the bit of the scalar value is 0. the addition calculation includes 
adding a point mP to a double point of the point (m+1 )P and the doubling 
calculations include doubling the point mP to obtain 2(mP) where m comprises the 
scalar value and P comprises the point, and 
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doubling calculations include doubling the double point of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

21. (new) -The multiplication calculation method according to claim 7, wherein 
when the value of the bit of the scalar value is 0, the addition calculation includes 
adding a point mP to a double point of the point (m+1)P and the doubling 
calculations include doubling the point mP to obtain 2(mP) where m comprises the 
scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1, the addition 
calculation includes adding a point mP to a double point of the point (m+1)P and the 
doubling calculations include doubling the double point of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

22. (new) The multiplication calculation method according to claim 11, 
wherein when the value of the bit of the scalar value is 0. the addition calculation 
includes adding a point mP to a double point of the point (m+1)P and the doubling 
calculations include doubling the point mP to obtain 2(mP) where m comprises the 
scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a double point of the point (m+1)P and the 
doubling calculations include doubling the double point of the point (m+1)P to obtain 
2((m+i)P) where m comprises the scalar value and P comprises the point. 
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